Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: zLT9c9E9LGfy6luSOu72ORacvYUocFf2Xq9Baeq5ou4=
Subject key identifier: 3A:E2:8C:D6:1E:38:78:D9:A2:32:EA:D3:DF:CB:47:19:75:C3:59:1C
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 01963A2E0EDB25645220BAEA42005A9F8E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 104A
Signing time: Tue 15 Apr 2025 16:00:19 +0000
Manifest this update: Tue 15 Apr 2025 16:00:19 +0000
Manifest next update: Wed 16 Apr 2025 16:00:19 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: QO026brCqChOjIMw9EX/BxNgETn3M/tM/tAUe7ej+5c=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:2e:0e:db:25:64:52:20:ba:ea:42:00:5a:9f:8e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Apr 15 16:00:19 2025 GMT
Not After : Apr 16 16:00:19 2025 GMT
Subject: CN=3ae28cd61e3878d9a232ead3dfcb471975c3591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:f2:3c:77:82:4b:31:99:73:91:fb:19:f0:
8e:38:02:4e:4d:ac:c7:c9:2a:9e:21:2f:45:74:29:
fe:b9:3c:9a:f8:c5:02:47:15:45:ce:37:79:50:05:
9c:7e:48:b8:f8:d9:2d:7e:b4:c8:6c:08:0e:c1:ea:
91:a2:0b:83:c8:69:14:19:c7:fe:f1:20:2a:28:35:
0c:15:03:79:11:61:d7:e6:e7:33:d9:ea:7a:c3:7d:
06:54:1c:20:e1:c6:9e:ba:a4:a6:5b:ea:2e:98:1f:
dc:5a:f9:6e:67:44:0c:17:f2:b8:51:73:b7:ca:ac:
82:23:b9:de:44:f7:f2:59:83:d7:79:10:d2:28:78:
3f:2b:c8:f3:89:0f:06:c1:6c:f9:cd:91:16:84:e0:
bc:97:06:15:6f:43:7f:93:b0:61:43:72:37:60:8e:
49:04:8c:f6:94:62:c8:4a:47:89:ff:5d:02:26:24:
e0:cc:13:b4:60:0a:2e:35:3c:14:64:48:b8:df:1b:
bd:ac:d1:06:f1:9a:05:57:d8:c3:3f:3c:c1:60:55:
dd:67:20:b2:78:76:f3:57:67:0f:cc:30:c2:81:58:
bc:d7:48:05:f8:95:e4:45:0b:4b:6d:fa:bf:bc:e9:
b5:6c:a6:77:30:16:96:06:bd:4f:69:23:e1:69:db:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:8C:D6:1E:38:78:D9:A2:32:EA:D3:DF:CB:47:19:75:C3:59:1C
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b6:8d:9f:6d:2a:59:4e:87:8d:f2:4c:ff:e2:ca:8e:9f:83:
53:0b:9f:d9:2a:ea:7c:31:e3:5a:2c:72:68:76:03:1c:5b:23:
00:8f:8a:4d:46:a8:92:9b:a4:2c:40:cc:09:f6:53:3b:d3:6f:
4b:2c:31:72:d8:51:be:13:85:3e:04:91:27:72:f0:c2:ad:81:
89:f1:b3:fa:40:d6:63:77:71:21:1a:e2:19:80:bc:80:01:89:
e3:6c:3e:42:57:32:80:a1:95:36:c8:7c:05:86:65:44:ae:4c:
00:cb:d4:1e:e2:99:d2:38:77:9b:c3:57:64:6e:ac:4c:df:57:
db:55:06:c4:cd:16:62:b4:27:64:7b:ea:46:df:b8:85:86:15:
20:36:28:f2:fd:06:36:80:9b:36:bc:4f:4c:dc:c6:8a:d9:85:
a4:d8:9e:57:10:c2:ec:57:8f:d2:37:a8:08:80:85:35:4c:59:
ea:87:fe:63:3d:35:da:7f:09:05:ef:51:1b:36:cb:f5:a2:e6:
37:ea:bd:f9:fe:e5:2f:28:94:0f:bb:f5:b5:47:af:9b:50:8a:
71:71:61:d2:9b:f8:e2:df:af:72:88:01:ea:7f:04:6d:f8:d1:
91:88:dd:2c:41:2d:75:f4:7d:02:1e:7e:aa:dd:1b:1e:12:62:
66:bd:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:03:03 2025 by rpki-client